$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: OqHiFuZrWnE88d8jKVYLCY9rdSn9Sh0vpJAETy1Koao= Subject key identifier: 0D:45:C6:C0:24:A0:B6:4A:8F:33:35:4F:C7:AB:FA:AA:76:64:76:1B Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C4D Signing time: Fri 30 May 2025 18:36:25 +0000 Manifest this update: Fri 30 May 2025 18:36:24 +0000 Manifest next update: Fri 06 Jun 2025 18:36:24 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: xenLgBI6DCf9QLXVFaGr2pQXHQa3IANYL7kD+YNh5Jk=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: May 30 18:36:24 2025 GMT Not After : Jun 6 18:36:24 2025 GMT Subject: CN=6839faa8-95cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:23:2e:2b:15:91:46:cb:2b:42:c8:e7:60:8d: 81:c0:7d:bd:69:19:dc:90:18:21:2e:1f:06:06:8b: 0e:73:80:d5:3a:7e:b0:2c:92:b8:f0:cc:0f:49:01: 7c:75:d8:ab:e3:af:60:ae:c7:8d:88:ec:66:85:91: 1a:ec:88:f2:2f:df:18:0f:be:e1:4b:25:a8:ff:cf: 9d:5f:3f:b2:4c:5f:72:ee:49:3a:7e:d3:75:b4:0a: c4:13:b0:c2:09:10:43:13:53:67:0e:f3:4e:21:e8: fd:9a:36:f6:80:e9:e5:e6:4d:9c:31:88:04:a3:77: a2:a6:2c:ba:cb:46:25:c9:ca:83:34:f1:1f:a0:fc: b7:f7:3e:c4:4c:32:6e:9c:e8:e2:72:d9:4d:55:c8: 69:6a:f9:1e:95:2d:2d:f1:4d:5f:6a:42:cf:97:46: b7:d5:ce:dc:6a:a0:0c:dd:af:aa:f1:63:4b:71:49: b6:cb:eb:44:5c:22:7e:21:0d:94:4d:e3:c1:dd:91: 5b:f4:61:ad:f1:e6:56:30:45:5a:7d:31:49:18:06: 94:10:62:2e:ce:0e:08:0d:79:b0:46:b1:93:b0:66: 56:31:7f:d0:53:47:77:ec:5d:e3:b7:a8:8a:d2:58: 92:4f:ee:17:c4:bb:55:6f:4e:53:fe:d7:7e:f0:93: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:C6:C0:24:A0:B6:4A:8F:33:35:4F:C7:AB:FA:AA:76:64:76:1B X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:73:9a:a6:05:03:92:fc:94:67:fd:11:5c:54:ba:2e:9f: b5:e5:d3:1c:a5:c4:98:aa:81:c7:57:50:06:3c:5f:7c:6d:5e: b9:85:9a:61:ef:93:68:30:37:40:b1:b1:56:fb:81:df:24:cb: e6:5c:45:46:21:58:ff:72:77:6f:a2:8b:ee:29:cb:a8:e1:03: e9:d3:dc:bf:df:9e:05:cd:3c:e7:e3:d6:47:10:04:2a:5e:f5: 5e:4e:42:9b:21:d1:66:38:f8:53:f2:d7:66:15:a9:b1:d7:29: f2:b5:a3:15:46:1d:4d:d0:48:8c:42:d2:4d:53:00:8f:08:9d: b7:e7:e8:95:21:a2:29:67:06:9f:12:c7:4b:94:cb:32:a0:cc: 91:80:51:24:95:1a:a7:22:8f:13:6d:36:75:a2:f7:5f:0c:e0: 62:74:cd:63:f2:b9:de:72:d4:37:eb:21:77:1b:f0:59:de:98: ab:77:97:06:13:0f:c9:d1:e5:f2:97:e7:16:2e:f2:17:79:dc: d1:c3:4c:38:c8:18:c5:3a:21:e0:1f:b5:f0:b4:f2:77:a0:05: 72:27:d5:be:9a:ad:47:13:52:40:f3:93:8a:d1:9c:06:4b:fa: dc:08:f1:c0:1d:87:71:59:14:d4:fb:86:62:4a:3b:da:1e:6a: c9:06:56:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwNTMwMTgzNjI0WhcNMjUwNjA2MTgzNjI0WjAYMRYwFAYD VQQDEw02ODM5ZmFhOC05NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iMuKxWRRssrQsjnYI2BwH29aRnckBghLh8GBosOc4DVOn6wLJK48MwPSQF8 ddir469grseNiOxmhZEa7IjyL98YD77hSyWo/8+dXz+yTF9y7kk6ftN1tArEE7DC CRBDE1NnDvNOIej9mjb2gOnl5k2cMYgEo3eipiy6y0YlycqDNPEfoPy39z7ETDJu nOjictlNVchpavkelS0t8U1fakLPl0a31c7caqAM3a+q8WNLcUm2y+tEXCJ+IQ2U TePB3ZFb9GGt8eZWMEVafTFJGAaUEGIuzg4IDXmwRrGTsGZWMX/QU0d37F3jt6iK 0liST+4XxLtVb05T/td+8JOEUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1FxsAk oLZKjzM1T8er+qp2ZHYbMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2nOapgUDkvyUZ/0RXFS6Lp+15dMcpcSYqoHHV1AGPF98bV65hZph 75NoMDdAsbFW+4HfJMvmXEVGIVj/cndvoovuKcuo4QPp09y/354FzTzn49ZHEAQq XvVeTkKbIdFmOPhT8tdmFamx1ynytaMVRh1N0EiMQtJNUwCPCJ235+iVIaIpZwaf EsdLlMsyoMyRgFEklRqnIo8TbTZ1ovdfDOBidM1j8rnectQ36yF3G/BZ3pird5cG Ew/J0eXyl+cWLvIXedzRw0w4yBjFOiHgH7XwtPJ3oAVyJ9W+mq1HE1JA85OK0ZwG S/rcCPHAHYdxWRTU+4ZiSjvaHmrJBlar -----END CERTIFICATE-----Generated at Sat May 31 17:06:29 2025 by rpki-client